Category Archives: Security

S/MIME And Poor OpenPGP Email Client Behavior Leak Plaintext

Posted on by

Today disclosure of two plaintext leaking behaviors in email clients handling OpenPGP and S/MIME encrypted messages has been released (archived). The vulnerability affecting S/MIME is baked into the S/MIME standard and may only be mitigated by abandoning S/MIME, no other mitigation is possible. Meanwhile the plaintext leaking behavior affecting OpenPGP encrypted emails requires certain common but very stupid behavior on the part of an email client and the user allowing the email client to be involved in decrypting the message.

The attack in OpenPGP encrypted email involves the message being molested on the wire in such a way the plaintext metadata surrounding the cyphertext is modified to engage your typical email client's HTML rendering engine. If the email client is allowed to be involved in decrypting the cyphertext as is common with various client "plugins", the email client can "phone home" the plaintext after decryption to the message's molester according to the spurious instructions delivered to the HTML rendering engine. The mitigation for this vulnerability is hygiene and not allowing your email client to be involved in cryptographic operations beyond sending and recieving cyphertext blobs encrypted and decrypted elsewhere.

Revived Phuctor Breaks A Big Pile Of Github Developer SSH Keys In Return

Posted on by

Today No Such lAbs principals Mircea Popescu and Stanislav Datskovskiy disclosed the existence of 192 weak Github developer SSH keys which were broken by the Phuctor, the RSA supercollider and numerical observatory operated by No Such lAbs. The keys all appear to be used by actual Github contributors with definite yet varying amounts activity.

"Great Again" Candidate Leading Wide Presidential Field In Early Stage Of Campaign In Brazil

Posted on by

In Brazil the race for the Presidency has an early frontrunner in Jair Bolsonaro, who is running a Durterte/Trump/Putin style "Make Great" campaign (archived). Within a wide field of candidates largely from "more of the same" Pantsuitist parties, Bolsonaro is drawing support from 17-21 percent of likely voters in polls which at this stage is enough to cement him as the frontrunner. Bolsonaro is promising "open season on crime", which taps into deep Brasilero frustrations with constantly being mugged in Brazil's hyper urbanized megacities.

Largest Israeli Missile Barrage In 7 Years Of Syrian War Aggresses Against Iranian Positions

Posted on by

Overnight the continuing escalation of direct, as opposed to proxy, conflict in Syrian hit a new high as the Israelis launched their largest missile barrage in the 7 year history of the Syrian "Civil" War (archived). Not content to let the big countries work through their issues by proxy while US President Trump contemplates a withdrawal from the theater, Israeli Prime Minister Netanyahu's behavior increasingly parallels that of the late Paraguayan President Francisco Solano Lopez in 1864.

German Police Capture 89 Year Old WWII Surviving Political Dissident

Posted on by

Police in Germany have captured the 89 year old Grandmother and political dissent whom Mother Merkel's courts had sentenced to spend the rest of her effective life in prison (archived). The International Auschwitz Committee's hopes have indeed been realized as this octagenarian either dies in prison or is released as a nonagenarian.

While Merkel's Germany expends precious resources incarcerating the elderly, actual violent anti Jewish action growing within German borders comes from a different democraphic.

Acid Attacks Growing As A Cornerstone of New Ingsoc Culture

Posted on by

Today in the South London district of Brixton a woman was sprayed with corrosive liquid on a crowded bus and later doused nude, with water, by firefighters in the street (archived). Meanwhile on Sunday three men were injured in a single East London acid attack (archived). Unknown in England before the 21st century, corrosive liquid assaults are swiftly becoming one of the most dominant kinds of assault on the Airstrip.

German Police Hunting 89 Year Old Civilian WWII Survivor

Posted on by

Ursula Haverbeck, an 89 year old survivor of the second World War, is being pursued by German Police and a group calling itself "The International Auschwitz Committee" (archived). Haverbeck, who was 16 years old in 1945, was sentenced to 2 years in prison for disputing the official Holocaust narrative. In light of her advanced age, any prison sentence is likely to be a life sentence.

While actual violence against Jews is increasing in Germany an awful lot of efforts seems to be wasted trying to ensure a non-violent political activist dies in jail.